Here's the event we're looking for. I'd like to alert when all three strings are found (gPlink, ogranizationalUnit, Write Property). Event Type:Success Audit Event Source:Security Event Category:Directory Service Access Event ID:566 Date:4/12/2012 Time:12...